+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 22
How do you do....it? Thread, Restrict filetypes in Technical; How do you lot prevent kids from saving unwanted files to they're homedrives? At present I just delete certain files ...
  1. #1

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,766
    Thank Post
    873
    Thanked 673 Times in 442 Posts
    Rep Power
    502

    Restrict filetypes

    How do you lot prevent kids from saving unwanted files to they're homedrives?

    At present I just delete certain files when they logoff but this isnt stopping them doing it

    Also finding that they are storing them in ZIP files and extracting them the next time they log in

    But have now added that to the delete.bat file

  2. #2
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    34

    Re: Restrict filetypes


  3. #3
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    34

    Re: Restrict filetypes

    (not that I have, just that I know you can!)

  4. #4
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,993
    Thank Post
    120
    Thanked 286 Times in 263 Posts
    Rep Power
    107

    Re: Restrict filetypes

    I have a new R2 file server ready to implement for these purposes in the holidays

  5. #5
    flyinghaggis's Avatar
    Join Date
    Jan 2006
    Posts
    1,048
    Thank Post
    105
    Thanked 76 Times in 59 Posts
    Rep Power
    116

    Re: Restrict filetypes

    We set up software restriction policies that stop pupil/staff from running executables from their my documents area's and local/removable drives. It doesnt stop them copying files into these areas but we're found that as soon as users realise they cant run files they copy into these areas it stops them from doing it.
    Never realised that 2003 could do this. Handy to know it can filter file types in shares! (though unfortunately our main file servers are still 2000)

    If anyone wants any advice on how to set up Software Restriction Polcies you can PM me :!:

  6. #6
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,993
    Thank Post
    120
    Thanked 286 Times in 263 Posts
    Rep Power
    107

    Re: Restrict filetypes

    Quote Originally Posted by flyinghaggis
    We set up software restriction policies that stop pupil/staff from running executables from their my documents area's and local/removable drives. It doesnt stop them copying files into these areas but we're found that as soon as users realise they cant run files they copy into these areas it stops them from doing it.
    Never realised that 2003 could do this. Handy to know it can filter file types in shares! (though unfortunately our main file servers are still 2000)

    If anyone wants any advice on how to set up Software Restriction Polcies you can PM me :!:
    Only the R2 version can do the filtering.

  7. #7
    apeo's Avatar
    Join Date
    Sep 2005
    Location
    Lost
    Posts
    1,612
    Thank Post
    95
    Thanked 115 Times in 111 Posts
    Rep Power
    42

    Re: Restrict filetypes

    w00t! i have a new R2 server to build over summer

  8. #8

    Join Date
    Nov 2005
    Location
    North
    Posts
    1,849
    Thank Post
    25
    Thanked 91 Times in 71 Posts
    Rep Power
    51

    Re: Restrict filetypes

    I installed it and it seems to work pretty well.

    It would have been nice for Microsoft to create a different error message when they try and save it though rather than the access denied. I can see them thinking its a problem with the network rather than they doing something wrong.

    Also, how long will it be before they realise they can could just change the file extension to make them work. Interent filtering will stop them downloading them but they could still bring them in on USBs.

  9. #9

    Join Date
    Feb 2006
    Posts
    1,187
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Restrict filetypes

    Can the *nixers describe how they would do something similar. I know you can have non-excutable mounts or filesystems.

    I more interested in stopping things like launching MOVs and MP3s from home areas but allowing teaching resources in a shared reference area.

  10. #10
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,993
    Thank Post
    120
    Thanked 286 Times in 263 Posts
    Rep Power
    107

    Re: Restrict filetypes

    Im no expert and I may have this wrong but I remember someone mentioned this once to do with samba and using the veto directive/function/thingerydufferemy.

  11. #11

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Restrict filetypes

    Is that anything to do with foomatic filters

  12. #12

    Join Date
    Jan 2006
    Posts
    22
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Restrict filetypes

    Quote Originally Posted by flyinghaggis
    We set up software restriction policies that stop pupil/staff from running executables from their my documents area's and local/removable drives. It doesnt stop them copying files into these areas but we're found that as soon as users realise they cant run files they copy into these areas it stops them from doing it.
    I'm just implementing this on our test system at the moment, and it's working brilliantly. Hopefully I'll be enabling this on the live system over the summer holiday.

  13. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,819
    Thank Post
    110
    Thanked 588 Times in 509 Posts
    Blog Entries
    1
    Rep Power
    226

    Re: Restrict filetypes

    Quote Originally Posted by NetworkGeezer
    Can the *nixers describe how they would do something similar. I know you can have non-excutable mounts or filesystems.

    I more interested in stopping things like launching MOVs and MP3s from home areas but allowing teaching resources in a shared reference area.
    Sorry, missed this thread the first time round for some reason. Anyway there's two ways depending on the situation:

    1) if your in a native linux enviroment, then you set the /home to be a seperate mount point. This is likely anyway for quota support. You must use the noexec, nodev and nosuid to prevent user naughtyness. (If you interested in furtuer mount options look at this thread on the Linux Elitists mailing list[/url]). Linux has no concept of 'file extensions' of course.

    2) If your using Samba on a linux box as a fileserver you can use a file extension filter on a per share basis. You can do this with the 'veto files' option. For example, to ban mp3s:

    Code:
    [homes] 
       comment = Home Directories 
       browseable = no 
       writable = yes 
     
       veto files = /*.mp3/*.MP3/

  14. #14
    mark's Avatar
    Join Date
    Jun 2005
    Posts
    3,986
    Thank Post
    269
    Thanked 52 Times in 46 Posts
    Blog Entries
    2
    Rep Power
    47

    Re: Restrict filetypes

    I've used TrustNoExe to stop executables that works pretty well.

    Kids are now running .SWFs tho' which is a royal pain. Looks like upgrading to 2003 R2 is the only answer - unless anyone knows different?

  15. #15

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    19

    Re: Restrict filetypes

    Quote Originally Posted by mark
    Kids are now running .SWFs tho' which is a royal pain. Looks like upgrading to 2003 R2 is the only answer - unless anyone knows different?
    If you use software restriction policies in GPOs you can decide what counts as an executable.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Restrict Logon
    By DSapseid in forum Wireless Networks
    Replies: 7
    Last Post: 28th March 2007, 10:30 AM
  2. restrict pupils printing
    By chrbb in forum How do you do....it?
    Replies: 3
    Last Post: 6th July 2006, 07:51 AM
  3. Restrict software installation
    By nuttygeek in forum Windows
    Replies: 27
    Last Post: 13th March 2006, 10:18 PM
  4. Restrict Access To USB Devices
    By MuppetQueen in forum Wireless Networks
    Replies: 25
    Last Post: 15th December 2005, 04:53 PM
  5. Restrict where staff can install from
    By daverage in forum Wireless Networks
    Replies: 13
    Last Post: 24th November 2005, 08:33 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •